While trying to run adprep, so that I could add a Windows 2003 R2 machine to the domain as a second domain controller, i encountered an error: Adprep encountered an LDAP error. Error code: 0x32. Server extended error code: 0x2098, Server error message: 00002098: SecErr: DSID-03151D7D, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 In researching this error, i found i needed to modify something in the group policy editor. And when i tried to open that up, i get the following box. Group Policy Error You do not have permission to preform this operation. Details: access is denied I am logged in as the admin, although the network was set up by a previous consultant, and the old accounts that they used for access do not exist anymore. my feeling is that they may have used the group policy to determine what admin user can access the group policy editor. the admin user being used is a fully privileged administrative user and a member of every administrative group that exists on the system. is there any way around this to be able to access the group policy editor?

What is the Event Log showing? Are you logged in as the Default Administrator? Did you Google? I found this (one of many articles that may help.) http://support.microsoft.com/kb/839499 Life's more painless for the brainless.